Home / theonedev / onedev
Repository Analysis

theonedev/onedev

Git Server with CI/CD, Kanban, and Packages. Seamless integration. Unparalleled experience.

2.2 Likely human-written View on GitHub
2.2
Adjusted Score
2.2
Raw Score
100%
Time Factor
2026-05-30
Last Push
15,023
Stars
Java
Language
629,742
Lines of Code
5086
Files
183
Pattern Hits
2026-05-31
Scan Date

Score History

Severity Breakdown

CRITICAL 117HIGH 0MEDIUM 0LOW 66

Pattern Findings

183 matches across 4 categories. Click a row to expand file-level details.

Hallucination Indicators117 hits · 1330 pts
SeverityFileLineSnippet
CRITICAL…er-core/src/main/java/io/onedev/server/CoreModule.java761 script.setContent(newArrayList("io.onedev.server.util.ScriptContribution.determineBuildFailureInvestigator()"));
CRITICAL…er-core/src/main/java/io/onedev/server/CoreModule.java772 script.setContent(newArrayList("io.onedev.server.util.ScriptContribution.getBuildNumber()"));
CRITICAL…er-core/src/main/java/io/onedev/server/CoreModule.java783 script.setContent(newArrayList("io.onedev.server.util.ScriptContribution.getCurrentUser()"));
CRITICAL…/src/main/java/io/onedev/server/buildspec/job/Job.java374 io.onedev.server.buildspec.job.retrycondition.RetryCondition.parse(this, getRetryCondition());
CRITICAL…/server/buildspec/job/trigger/BranchUpdateTrigger.java116 return io.onedev.server.util.usermatch.UserMatch.parse(getUserMatch()).matches(refUpdated.getUser());
CRITICAL…erver/buildspec/job/action/SendNotificationAction.java33 io.onedev.server.buildspec.job.action.notificationreceiver.NotificationReceiver.parse(getReceivers(), build);
CRITICAL…nedev/server/buildspec/job/action/PostBuildAction.java36 io.onedev.server.buildspec.job.action.condition.ActionCondition.parse(job, condition);
CRITICAL…onedev/server/util/oauth/DefaultOAuthTokenService.java58 new com.nimbusds.oauth2.sdk.token.RefreshToken(refreshTokenValue);
CRITICAL…ore/src/main/java/io/onedev/server/web/WebSession.java49 return (WebSession) org.apache.wicket.protocol.http.WebSession.get();
CRITICAL…eb/page/admin/labelmanagement/LabelManagementPage.java62 return new org.apache.wicket.markup.html.basic.Label(componentId, _T("Labels"));
CRITICAL…rver/web/page/project/compare/RevisionComparePage.java540 new io.onedev.server.web.asset.revisioncompare.RevisionCompareCssResourceReference()));
CRITICAL…blob/render/renderers/markdown/MarkdownBlobEditor.java123 var requestQuery = new PullRequestQuery(new io.onedev.server.search.entity.pullrequest.FuzzyCriteria(query));
CRITICAL…blob/render/renderers/markdown/MarkdownBlobEditor.java135 var issueQuery = new IssueQuery(new io.onedev.server.search.entity.issue.FuzzyCriteria(query));
CRITICAL…a/io/onedev/server/web/asset/jqueryui/jquery-ui.min.js6!function(t){"use strict";"function"==typeof define&&define.amd?define(["jquery"],t):t(jQuery)}(function(V){"use strict"
CRITICAL…o/onedev/server/web/asset/codemirror/lib/codemirror.js8946 return this.cm.display.wrapper.ownerDocument.getSelection()
CRITICAL…/io/onedev/server/web/asset/xterm/xterm-addon-webgl.js1!function(e,t){"object"==typeof exports&&"object"==typeof module?module.exports=t():"function"==typeof define&&define.am
CRITICAL…rc/main/java/io/onedev/server/web/asset/xterm/xterm.js1!function(e,t){if("object"==typeof exports&&"object"==typeof module)module.exports=t();else if("function"==typeof define
CRITICAL…n/java/io/onedev/server/web/asset/marked/marked.min.js47`+s.text,this.inlineQueue.pop(),this.inlineQueue.at(-1).src=r.text):t.push(s);continue}if(e){let r="Infinite loop on byt
CRITICAL…in/java/io/onedev/server/web/util/SuggestionUtils.java430 var issueQuery = new IssueQuery(new io.onedev.server.search.entity.issue.FuzzyCriteria(scopedQuery.getQuery()));
CRITICAL…in/java/io/onedev/server/web/util/SuggestionUtils.java450 var requestQuery = new PullRequestQuery(new io.onedev.server.search.entity.pullrequest.FuzzyCriteria(scopedQuery.getQ
CRITICAL…/onedev/server/web/component/comment/CommentInput.java90 var requestQuery = new PullRequestQuery(new io.onedev.server.search.entity.pullrequest.FuzzyCriteria(query));
CRITICAL…/onedev/server/web/component/comment/CommentInput.java102 var issueQuery = new IssueQuery(new io.onedev.server.search.entity.issue.FuzzyCriteria(query));
CRITICAL…src/main/java/io/onedev/server/ai/BuildSpecSchema.java77 grammarStream = io.onedev.server.buildspec.job.retrycondition.RetryCondition.class.getResourceAsStre
CRITICAL…src/main/java/io/onedev/server/ai/BuildSpecSchema.java79 grammarStream = io.onedev.server.util.usermatch.UserMatch.class.getResourceAsStream("UserMatch.g4");
CRITICAL…ver/model/support/issue/transitionspec/ManualSpec.java123 io.onedev.server.search.entity.issue.IssueQuery parsedQuery = io.onedev.server.search.entity.issue.IssueQuery.parse(i
CRITICAL…l/support/channelnotification/ChannelNotification.java166 return io.onedev.server.search.entity.issue.IssueQuery.parse(event.getProject(), getIssueQuery(), option, true)
CRITICAL…l/support/channelnotification/ChannelNotification.java173 return io.onedev.server.search.entity.build.BuildQuery.parse(event.getProject(), getBuildQuery(), false, true)
CRITICAL…l/support/channelnotification/ChannelNotification.java180 return io.onedev.server.search.entity.pullrequest.PullRequestQuery.parse(event.getProject(), getPullRequestQuery(),
CRITICAL…l/support/channelnotification/ChannelNotification.java187 return io.onedev.server.search.commit.CommitQuery.parse(event.getProject(), getCommitQuery(), false)
CRITICAL…l/support/channelnotification/ChannelNotification.java194 return io.onedev.server.search.entity.codecomment.CodeCommentQuery.parse(event.getProject(), getCodeCommentQuery(),
CRITICAL…/server/model/support/administration/GroovyScript.java125 if (jobAuthorization != null && io.onedev.server.job.match.JobMatch.parse(jobAuthorization, true, false).isUsingProjec
CRITICAL…/server/model/support/administration/GroovyScript.java134 var jobMatch = io.onedev.server.job.match.JobMatch.parse(jobAuthorization, true, false);
CRITICAL…it/signatureverification/ssh/SshSignatureVerifier.java75 hash = org.apache.commons.codec.digest.DigestUtils.sha256(data);
CRITICAL…it/signatureverification/ssh/SshSignatureVerifier.java77 hash = org.apache.commons.codec.digest.DigestUtils.sha512(data);
CRITICAL…er/validation/validator/PullRequestQueryValidator.java26 io.onedev.server.search.entity.pullrequest.PullRequestQuery.parse(project, value, true);
CRITICAL…ev/server/validation/validator/UserMatchValidator.java24 io.onedev.server.util.usermatch.UserMatch.parse(value);
CRITICAL…erver/validation/validator/InterpolativeValidator.java45 io.onedev.server.util.interpolative.Interpolative.parse(each2);
CRITICAL…server/validation/validator/ProjectQueryValidator.java24 io.onedev.server.search.entity.project.ProjectQuery.parse(value);
CRITICAL…v/server/validation/validator/BuildQueryValidator.java32 io.onedev.server.search.entity.build.BuildQuery.parse(project, value,
CRITICAL…ev/server/validation/validator/PackQueryValidator.java29 io.onedev.server.search.entity.pack.PackQuery.parse(project, value, withCurrentUserCriteria);
CRITICAL…dev/server/validation/validator/JobMatchValidator.java30 io.onedev.server.job.match.JobMatch.parse(value, withProjectCriteria, withJobCriteria);
CRITICAL…r/validation/validator/ReviewRequirementValidator.java25 io.onedev.server.util.reviewrequirement.ReviewRequirement.parse(value);
CRITICAL…v/server/validation/validator/AgentQueryValidator.java27 io.onedev.server.search.entity.agent.AgentQuery.parse(value, forRunner);
CRITICAL…rver/validation/validator/WorkspaceQueryValidator.java29 io.onedev.server.search.entity.workspace.WorkspaceQuery.parse(project, value, withCurrentUserCriteria);
CRITICAL…/server/validation/validator/CommitQueryValidator.java25 io.onedev.server.search.commit.CommitQuery.parse(Project.get(), value, true);
CRITICAL…v/server/validation/validator/IssueQueryValidator.java56 io.onedev.server.search.entity.issue.IssueQuery.parse(project, value, option, true);
CRITICAL…er/validation/validator/CodeCommentQueryValidator.java26 io.onedev.server.search.entity.codecomment.CodeCommentQuery.parse(project, value, true);
CRITICAL…alidation/validator/NotificationReceiverValidator.java25 io.onedev.server.buildspec.job.action.notificationreceiver.NotificationReceiver.parse(value, null);
CRITICAL…o/onedev/server/plugin/sso/openid/OpenIdConnector.java151 com.nimbusds.oauth2.sdk.auth.Secret clientSecret = new com.nimbusds.oauth2.sdk.auth.Secret(getClientSecret());
CRITICAL…a/io/onedev/server/plugin/report/junit/test-result.xml71 at io.onedev.commons.utils.PathUtilsTest.testResolveSibling(PathUtilsTest.java:44)
CRITICAL…a/io/onedev/server/plugin/report/junit/test-result.xml77 at org.junit.internal.runners.model.ReflectiveCallable.run(ReflectiveCallable.java:12)
CRITICAL…a/io/onedev/server/plugin/report/junit/test-result.xml78 at org.junit.runners.model.FrameworkMethod.invokeExplosively(FrameworkMethod.java:44)
CRITICAL…a/io/onedev/server/plugin/report/junit/test-result.xml79 at org.junit.internal.runners.statements.InvokeMethod.evaluate(InvokeMethod.java:17)
CRITICAL…a/io/onedev/server/plugin/report/junit/test-result.xml89 at org.apache.maven.surefire.junit4.JUnit4Provider.execute(JUnit4Provider.java:252)
CRITICAL…a/io/onedev/server/plugin/report/junit/test-result.xml90 at org.apache.maven.surefire.junit4.JUnit4Provider.executeTestSet(JUnit4Provider.java:141)
CRITICAL…a/io/onedev/server/plugin/report/junit/test-result.xml91 at org.apache.maven.surefire.junit4.JUnit4Provider.invoke(JUnit4Provider.java:112)
CRITICAL…a/io/onedev/server/plugin/report/junit/test-result.xml96 at org.apache.maven.surefire.util.ReflectionUtils.invokeMethodWithArray(ReflectionUtils.java:189)
CRITICAL…a/io/onedev/server/plugin/report/junit/test-result.xml98 at org.apache.maven.surefire.booter.ProviderFactory.invokeProvider(ProviderFactory.java:85)
CRITICAL…a/io/onedev/server/plugin/report/junit/test-result.xml99 at org.apache.maven.surefire.booter.ForkedBooter.runSuitesInProcess(ForkedBooter.java:115)
CRITICAL…a/io/onedev/server/plugin/report/junit/test-result.xml100 at org.apache.maven.surefire.booter.ForkedBooter.main(ForkedBooter.java:75)
57 more matches not shown…
Hyper-Verbose Identifiers41 hits · 42 pts
SeverityFileLineSnippet
LOW…he/wicket/protocol/ws/api/WebSocketRequestHandler.java50public class WebSocketRequestHandler implements IWebSocketRequestHandler
LOW…icket/request/http/handler/RedirectRequestHandler.java41public class RedirectRequestHandler implements IRequestHandler
LOW…/io/onedev/server/web/ResourceErrorRequestHandler.java13public final class ResourceErrorRequestHandler implements IRequestHandler {
LOW…o/onedev/server/web/asset/codemirror/mode/dart/dart.js135 function tokenInterpolationIdentifier(stream, state) {
LOW…ver/web/asset/codemirror/mode/powershell/powershell.js280 function tokenHereStringInterpolation(stream, state) {
LOW…o/onedev/server/web/asset/codemirror/mode/slim/slim.js265 function startAttributeWrapperMode(state, endQuote, tokenize) {
LOW…o/onedev/server/web/asset/codemirror/mode/sass/sass.js108 function buildInterpolationTokenizer(currentTokenizer) {
LOW…/io/onedev/server/web/asset/codemirror/mode/sql/sql.js226 function hookIdentifierDoublequote(stream) {
LOW…va/io/onedev/server/web/asset/codemirror/keymap/vim.js3363 function findFirstNonWhiteSpaceCharacter(text) {
LOW…va/io/onedev/server/web/asset/codemirror/keymap/vim.js3461 function recordLastCharacterSearch(increment, args) {
LOW…va/io/onedev/server/web/asset/codemirror/keymap/vim.js4653 function findNextFromAndToInclusive(cm, prev, query, repeat, vim) {
LOW…o/onedev/server/web/asset/codemirror/lib/codemirror.js1550 function conflictingCollapsedRange(doc, lineNo, from, to, marker) {
LOW…o/onedev/server/web/asset/codemirror/lib/codemirror.js1807 function defaultSpecialCharPlaceholder(ch) {
LOW…o/onedev/server/web/asset/codemirror/lib/codemirror.js2381 function updateExternalMeasurement(cm, line) {
LOW…o/onedev/server/web/asset/codemirror/lib/codemirror.js2557 function maybeUpdateRectForZooming(measure, rect) {
LOW…o/onedev/server/web/asset/codemirror/lib/codemirror.js2567 function clearLineMeasurementCacheFor(lineView) {
LOW…o/onedev/server/web/asset/codemirror/lib/codemirror.js2576 function clearLineMeasurementCache(cm) {
LOW…o/onedev/server/web/asset/codemirror/lib/codemirror.js4323 function maybeUpdateLineNumberWidth(cm) {
LOW…o/onedev/server/web/asset/codemirror/lib/codemirror.js4971 function selectionEventCanBeMerged(doc, origin, prev, sel) {
LOW…o/onedev/server/web/asset/codemirror/lib/codemirror.js5170 function setSelectionReplaceHistory(doc, sel, options) {
LOW…o/onedev/server/web/asset/codemirror/lib/codemirror.js5501 function makeChangeSingleDocInEditor(cm, change, spans) {
LOW…o/onedev/server/web/asset/codemirror/lib/codemirror.js5839 function adjustScrollWhenAboveVisible(cm, line, diff) {
LOW…nedev/server/web/asset/codemirror/addon/merge/merge.js789 function collapseIdenticalStretches(mv, margin) {
LOW…/web/asset/codemirror/addon/comment/continuecomment.js93 function continueLineCommentEnabled(cm) {
LOW…rver/web/asset/codemirror/addon/search/searchcursor.js45 function searchRegexpForwardMultiline(doc, regexp, start) {
LOW…rver/web/asset/codemirror/addon/search/searchcursor.js102 function searchRegexpBackwardMultiline(doc, regexp, start) {
LOW…dev/server/web/asset/codemirror/addon/search/search.js220 function getReplacementQueryDialog(cm) {
LOW…server/web/asset/codemirror/addon/edit/continuelist.js67 function incrementRemainingMarkdownListNumbers(cm, pos) {
LOW…edev/server/web/asset/bootstrap/js/bootstrap.bundle.js78 function getSpecialTransitionEndEvent() {
LOW…edev/server/web/asset/bootstrap/js/bootstrap.bundle.js142 getTransitionDurationFromElement: function getTransitionDurationFromElement(element) {
LOW…edev/server/web/asset/bootstrap/js/bootstrap.bundle.js2008 function getOffsetRectRelativeToArbitraryNode(children, parent) {
LOW…edev/server/web/asset/bootstrap/js/bootstrap.bundle.js2060 function getViewportOffsetRectRelativeToArtbitraryNode(element) {
LOW…edev/server/web/asset/bootstrap/js/bootstrap.bundle.js2112 function getFixedPositionOffsetParent(element) {
LOW…a/io/onedev/server/web/asset/bootstrap/js/bootstrap.js79 function getSpecialTransitionEndEvent() {
LOW…a/io/onedev/server/web/asset/bootstrap/js/bootstrap.js143 getTransitionDurationFromElement: function getTransitionDurationFromElement(element) {
LOW…/main/java/io/onedev/server/web/asset/moment/moment.js622 function replaceLongDateFormatTokens(input) {
LOW…/main/java/io/onedev/server/web/asset/moment/moment.js2405 function configFromStringAndFormat(config) {
LOW…/main/java/io/onedev/server/web/asset/moment/moment.js2986 function isDaylightSavingTimeShifted () {
LOW…/main/java/io/onedev/server/web/asset/moment/moment.js3100 function positiveMomentsDifference(base, other) {
LOW…/main/java/io/onedev/server/web/asset/moment/moment.js4391 function getSetRelativeTimeRounding (roundingFunction) {
LOW…/main/java/io/onedev/server/web/asset/moment/moment.js4403 function getSetRelativeTimeThreshold (threshold, limit) {
Over-Commented Block24 hits · 24 pts
SeverityFileLineSnippet
LOW…e/src/main/java/org/eclipse/jetty/server/Response.java1//
LOW…nedev/server/jetty/DefaultSessionDataStoreFactory.java1//
LOW…va/io/onedev/server/jetty/ClusterSessionDataStore.java1//
LOW…edev/server/web/asset/codemirror/mode/elixir/elixir.js361 state.context = state.context.prev
LOW…edev/server/web/asset/codemirror/mode/erlang/erlang.js461 }
LOW…/io/onedev/server/web/asset/codemirror/mode/sas/sas.js1// CodeMirror, copyright (c) by Marijn Haverbeke and others
LOW…va/io/onedev/server/web/asset/codemirror/keymap/vim.js661 // motions and operators with '.'.
LOW…o/onedev/server/web/asset/codemirror/lib/codemirror.js361
LOW…o/onedev/server/web/asset/codemirror/lib/codemirror.js2661 // on a bidi boundary.
LOW…o/onedev/server/web/asset/codemirror/lib/codemirror.js5621 // returning the number and optionally registering the line as
LOW…o/onedev/server/web/asset/codemirror/lib/codemirror.js5861 if (cm) { signalLater(cm, "lineWidgetAdded", cm, widget, typeof handle == "number" ? handle : lineNo(handle)); }
LOW…web/asset/codemirror/addon/search/match-highlighter.js1// CodeMirror, copyright (c) by Marijn Haverbeke and others
LOW…/onedev/server/web/asset/codemirror/addon/tern/tern.js1// CodeMirror, copyright (c) by Marijn Haverbeke and others
LOW…/onedev/server/web/asset/codemirror/addon/tern/tern.js21// multi-file view, switch the view or focus to the named file.
LOW…edev/server/web/asset/bootstrap/js/bootstrap.bundle.js2821 // we use `translate3d` to apply the position to the popper we
LOW…ava/io/onedev/server/web/asset/snapsvg/snap.svg-min.js1// Snap.svg 0.5.1
LOW…/java/io/onedev/server/web/asset/jsjoda/js-joda.min.js1//! @version js-joda - 1.11.0
LOWserver-product/helm/values.yaml101# podSecurityContext -- Allows you to overwrite the default
LOWserver-product/helm/values.yaml121
LOWserver-product/helm/values.yaml141 # exec:
LOWserver-product/helm/values.yaml161# topologySpreadConstraints -- Configure
LOWserver-product/helm/values.yaml181 # service.nodePort -- Specify a nodePort for servcie
LOWserver-product/helm/values.yaml261 storageClassName: ""
LOWserver-product/helm/values.yaml281# options:
Redundant / Tautological Comments1 hit · 1 pts
SeverityFileLineSnippet
LOW…ev/server/plugin/buildspec/rust/RustJobSuggestion.java105 "# Set CARGO_HOME to cache folder so that downloaded artifacts can be populated there. Note that we cannot cache '/